Microsoft

70-411
(Administering
Windows Server
2012)
http://www.elearningexams.com/70-411-exam

 This exam is part two of a series of three exams that test the skills and
knowledge necessary to administer a Windows Server 2012 infrastructure
in an enterprise environment. Passing this exam validates a candidates
ability to administer the tasks required to maintain a Windows Server2012
infrastructure, such as user and group management, network access, and
data security. Passing this exam along with the other two exams confirms
that a candidate has the skills and knowledge necessary for implementing
, managing, maintaining, and provisioning services and infrastructure in a
Windows Server 2012 environment Read more

http://www.elearningexams.com/70-411-exam

This exam measures your ability to accomplish the technical tasks

listed below. The percentages indicate the relative weight of each
major topic area on the exam:
Deploy, manage, and maintain servers (1520%)
Configure File and Print Services (1520%)
Configure network services and access (1520%)
Configure a Network Policy Server (NPS) infrastructure (1015%)
Configure and manage Active Directory (1015%)
Configure and manage Group Policy (1520%)

http://www.elearningexams.com/70-411-exam

http://www.elearningexams.com/70-411-exam

Are You Struggling with

Microsoft 70-411 Exam
And Want to Clear
in First Attempt?

Here We Present You

Microsoft 70-411 Real
Exam Questions.

http://www.elearningexams.com/70-411-exam

You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain
Services (AD DS) domain named Site.com. All servers in the Site.com domain have Microsoft
Windows Server 2012 R2 installed. You want to clone a domain controller to create another
domain controller. Which two of the following steps should you perform first? (Choose two).

A. You should run the Install-ADDSDomainController PowerShell cmdlet.

B. You should run the New-ADDCCloneConfigFile PowerShell cmdlet.
C. You should run the sysprep.exe /oobe command.
D. You should run the dcpromo.exe /adv command.
E. You should place a DCCloneConfig.xml file in the %Systemroot%\NTDS folder.
F. You should place an Unattend.xml file in the %Systemroot%\SYSVOL folder.

Answer: B,E

http://www.elearningexams.com/70-411-exam

You work as a Network Administrator at Site.com. Site.com has an Active Directory

Domain Services (AD DS) domain named Site.com. The Site.com network has a
Windows Server 2012 R2 domain controller named Site-DC10 which hosts the Web
Server, DNS and DHCP services. You create a snapshot backup of Site-DC10 using
the Ntdsutil utility and mount the snapshot. How would you access the contents of
the snapshot?
A. You should run the Ntdsutil.exe utility with the partition management parameter.
B. You should run the Dsamain.exe utility with the /allowupgrade parameter.
C. You should run the Dsamain.exe /dbpath command from the command prompt.
D. You should run the Ntdsutil.exe utility with the files parameter.
Answer: C

http://www.elearningexams.com/70-411-exam

You are hired by Site.com to administrate an Active Directory domain named Site.com which
encompasses a RADIUS server by the name of Site-SR08 running an installation of Windows
Server 2012. Your senior network administrator has provisioned a VPN server added to the ne
twork named Site-VPN05 and thereafter orders the creation of numerous network policies on
Site-SR08. Which of the following actions need to be taken if you are assigned the task of havi
ng Site configured to accept appeals for authentication from Site-VPN05?

A. You will need to run the Add-RemoteAccessRadius command on Site-SR08.

B. You will need to run the Get-NpsRadiusClient command on Site-SR08.
C. You will need to run the Set-RemoteAccessRadius command on Site-SR08.
D. You will need to configure the Routing and Remote Access Service (RRAS) role service on
Site-SR08.
Answer: B

http://www.elearningexams.com/70-411-exam

You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain
Services (AD DS) domain named Site.com. All servers in the Site.com domain have Microsof
t Windows Server 2012 R2 installed. A group policy object (GPO) is assigned to an organizat
ional unit (OU) named Sales. The GPO assigns several settings to the computers in the Sale
s department. You unlink the GPO from the Sales OU. You discover that some of the settings
applied by the GPO are still in effect on the Sales computers while other setting applied by th
e GPO have been removed. Which of the following statements is true?
A. The Restricted Groups security settings still in effect.
B. The unmanaged Administrative Template settings are still in effect.
C. The managed Administrative Template settings are still in effect.
D. The System Services security settings have been removed.
Answer: B

http://www.elearningexams.com/70-411-exam

You work as a Network Administrator at Site.com. Site.com has an Active Directory

Domain Services (AD DS) domain named Site.com. All servers in the Site.com
domain have Microsoft Windows Server 2012 R2 installed. A technician has create
d a vhdx file containing Windows Server 2012 R2 installation images. You need to
view information about the images contained in the vhdx file. You plan to use Depl
oyment Image Servicing and Management (DISM.exe). Which parameter should y
ou use with DISM.exe?
A. You should use the get-imageinfo parameter.
B. You should use the get-mountedwiminfo parameter.
C. You should use the list-image parameter.
D. You should use the mount-image parameter.
Answer: A

http://www.elearningexams.com/70-411-exam

You work as a Network Administrator at Site.com. Site.com has an Active Directory

Domain Services (AD DS) domain named Site.com. All servers in the Site.com
domain have Microsoft Windows Server 2012 R2 installed. You need to configure
a remote access solution to enable client computers to access network resources.
You install a Windows Server 2012 R2 server named Site-SR09. You install the Re
mote Access server role on Site-SR09. You need to configure Site-SR09 to accept
authentication requests from computers using 802.1X. Which authentication metho
d should you configure Site-SR09 to use?
A. EAP
B. MS-CHAP v2
C. CHAP
D. PAP
E. Machine certificate authentication for IKEv2
Answer: A

http://www.elearningexams.com/70-411-exam

You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (
AD DS) domain named Site.com. All servers in the Site.com domain have Microsoft Windows Server 20
12 R2 installed. Mia works as an IT Technician at Site.com. Mia is not a member of the Domain Admins
group. You need to enable Mia to link existing Group Policy objects (GPOs) in the domain. Mia must n
ot be able to modify existing GPOs. Your solution must minimize the administrative privileges assigne
d to Mia. Which two of the following actions would achieve the desired result? (Choose two possible a
nswers).
A. Click the Group Policy Objects node in Group Policy Management and add Mia under the Delegatio
n tab.
B. Click the domain node in Group Policy Management and add Mia under the Delegation tab.
C. Right-click the domain node in Active Directory Users and Computers and select Delegate Control.
D. Add Mia to the Group Policy Creator Owners group in Active Directory Users and Computers.
E. In Active Directory Users and Computers, add Mia to the Managed By tab in the properties of the Do
main Controllers group.
Answer: B,C

http://www.elearningexams.com/70-411-exam

You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Se
rvices (AD DS) domain named Site.com. All servers in the Site.com domain have Microsoft Wi
ndows Server 2012 R2 installed. Site.com has a Sales department. An OU exists for the Sales
department. The OU contains the user and computer accounts for the Sales department. A sha
dow group named SalesSG is configured for the Sales OU and contains all objects within the
Sales OU. A password settings object (PSO) named SalesPSO is applied to the SalesSG grou
p. You want to view the settings of SalesPSO. How can you view the settings of SalesPSO?
A. You should run the Get-ADDefaultDomainPasswordPolicy cmdlet.
B. You should run the Get- ADAccountPassword cmdlet.
C. You should run the Get-ADFineGrainedPasswordPolicy cmdlet.
D. You should run the Get-ADDefaultDomainPasswordPolicy cmdlet.
Answer: C

http://www.elearningexams.com/70-411-exam

You work as a Network Administrator at Site.com. Site.com has an Active Directory

Domain Services (AD DS) domain named Site.com. All servers on the network
have Windows Server 2012 R2 installed. Direct Access is enabled on the network
using the default configuration. You want the Direct Access clients to use Direct Ac
cess whenever they access the Internet. Which of the following actions should you
take?
A. You should run the Set-DAClientExperienceConfiguration cmdlet.
B. You should run the run the netsh -c advfirewall command.
C. You should modify the external IP address assigned to the Web server.
D. You should configure the force tunneling settings for DirectAccess clients.
Answer: D

http://www.elearningexams.com/70-411-exam

Your network contains an Active Directory domain named contoso.com. The doma
in contains 30 organizational units (OUs). You need to ensure that a user named
User1 can link Group Policy Objects (GPOs) in the domain. What should you do?
A. From the Active Directory Users and Computers, add User1 to the Network Co
nfiguration Operators group.
B. From the Group Policies Management, click the contoso.com node and modify
the Delegation settings.
C. From the Group Policies Management, click the Group policy Objects node and
modify the Delegation settings.
D. From the Active Directory Users and Computers, add User1 to the Group Polic
y Creator Owners group.
Answer: B

http://www.elearningexams.com/70-411-exam

http://www.elearningexams.com/70-411-exam